$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51f5b9b5-7986-48f5-b8ca-65770c13d249.roa File: 51f5b9b5-7986-48f5-b8ca-65770c13d249.roa (raw, json) Hash identifier: +cUEOqT0fxsj0A/3RbLvfCPzIqRaL8U5G2oD1ipSXI0= Subject key identifier: DF:D7:B5:BE:28:67:74:76:95:19:BE:75:53:6E:99:C0:24:8C:C6:D0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 662E90935E03A406936EE43E3628CFC5695B53BD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51f5b9b5-7986-48f5-b8ca-65770c13d249.roa Signing time: Fri 30 May 2025 00:21:22 +0000 ROA not before: Fri 30 May 2025 00:21:22 +0000 ROA not after: Fri 04 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f68:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:2e:90:93:5e:03:a4:06:93:6e:e4:3e:36:28:cf:c5:69:5b:53:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 30 00:21:22 2025 GMT Not After : Jul 4 23:59:59 2025 GMT Subject: serialNumber=0505773d1136fc4eb7aff2a579f86270f18b25f9e09e439e91ffdf2ee2571063, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6f:00:f2:99:3e:09:a1:46:56:a7:3d:b5:2b: 43:40:37:ef:db:31:80:43:ab:ca:d8:36:bb:fe:2f: 5b:8e:af:38:02:f5:2d:0e:da:fa:ff:61:20:51:a2: 57:ef:33:d6:97:41:9d:dc:45:8f:f0:91:b6:3e:2f: 9d:47:f7:84:d9:e2:79:5a:17:d4:fa:bb:5d:fc:6b: 1e:66:ca:d6:e1:28:f9:db:8b:5a:ee:a5:a5:65:42: cf:0b:5a:30:15:78:ab:d6:1b:b7:3a:df:7c:4f:ad: 07:41:47:8f:39:1e:ae:d9:0e:f8:8d:d4:7b:e5:17: 56:2f:fc:a6:9e:66:f6:85:c0:f9:73:3b:4d:27:86: 69:2e:12:09:47:19:13:3e:51:e2:05:3a:af:80:61: ac:51:49:fc:2a:cb:b6:5f:61:76:0f:f1:c0:94:55: 76:96:00:c3:15:a4:cc:c7:ac:6b:1f:fe:83:c9:85: 8f:5e:69:69:6f:6c:86:9f:dc:72:e2:25:b4:56:e2: f1:be:77:5e:50:fe:18:0b:80:1c:f0:df:78:ff:eb: 18:5c:a5:4d:8e:f4:13:e1:5c:70:65:11:0f:aa:73: 8c:40:9e:11:da:a9:0f:2a:8e:f1:52:40:46:b3:b6: 68:57:da:4b:d6:c2:19:91:60:80:72:00:d6:70:24: 3b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D7:B5:BE:28:67:74:76:95:19:BE:75:53:6E:99:C0:24:8C:C6:D0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51f5b9b5-7986-48f5-b8ca-65770c13d249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f68:6000::/40 Signature Algorithm: sha256WithRSAEncryption 03:3b:80:9b:8b:c1:6b:76:bf:7f:61:41:b2:23:86:86:f3:b8: 05:51:61:15:88:9d:d4:c4:a3:ed:20:08:06:40:87:a9:a7:79: f5:d8:99:bd:9e:06:e7:53:2c:22:81:8c:be:10:21:6c:97:ea: 34:c2:d9:9c:1e:a1:00:8b:d0:8b:54:f1:a1:a6:9d:64:22:76: 9f:08:3c:79:6b:36:a0:06:ae:63:3b:9c:b3:38:a5:c0:f1:56: af:60:fc:c6:37:e4:d3:bc:78:f4:1a:c2:01:6d:3e:89:11:4b: a8:72:6a:7e:b9:a0:e5:a5:51:2e:73:5c:a5:b7:76:e1:8e:49: 02:99:67:87:30:12:09:e5:c1:fe:07:db:9a:71:24:59:98:81: 9d:af:b5:7c:5d:1c:38:0c:f2:f1:6b:f9:ba:d5:cc:31:12:ca: 74:39:be:54:27:78:b3:9b:51:44:40:ba:80:5b:04:23:6f:f7: b2:d4:8e:bb:d9:c2:4f:26:d1:b8:f7:9e:df:66:7d:d2:c5:0d: ac:b2:de:11:dc:05:e7:f8:ef:b0:c7:29:7a:67:de:72:42:bf: 5a:91:3c:c5:f8:55:fc:80:11:eb:4f:af:dd:3a:52:6a:06:7c: 71:b4:f8:81:70:ed:5f:b0:cd:16:45:f7:2a:2a:61:d6:35:9c: f7:38:21:67 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUZi6Qk14DpAaTbuQ+NijPxWlbU70wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTMwMDAyMTIyWhcNMjUwNzA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNTA1NzczZDExMzZmYzRlYjdhZmYyYTU3OWY4NjI3MGYx OGIyNWY5ZTA5ZTQzOWU5MWZmZGYyZWUyNTcxMDYzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCobwDymT4JoUZWpz21K0NAN+/bMYBDq8rYNrv+L1uOrzgC 9S0O2vr/YSBRolfvM9aXQZ3cRY/wkbY+L51H94TZ4nlaF9T6u138ax5mytbhKPnb i1rupaVlQs8LWjAVeKvWG7c633xPrQdBR485Hq7ZDviN1HvlF1Yv/KaeZvaFwPlz O00nhmkuEglHGRM+UeIFOq+AYaxRSfwqy7ZfYXYP8cCUVXaWAMMVpMzHrGsf/oPJ hY9eaWlvbIaf3HLiJbRW4vG+d15Q/hgLgBzw33j/6xhcpU2O9BPhXHBlEQ+qc4xA nhHaqQ8qjvFSQEaztmhX2kvWwhmRYIByANZwJDsPAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU39e1vihndHaVGb51U26ZwCSMxtAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUxZjViOWI1LTc5ODYtNDhmNS1iOGNhLTY1NzcwYzEzZDI0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9oYDANBgkqhkiG9w0BAQsFAAOCAQEAAzuAm4vBa3a/f2FBsiOGhvO4 BVFhFYid1MSj7SAIBkCHqad59diZvZ4G51MsIoGMvhAhbJfqNMLZnB6hAIvQi1Tx oaadZCJ2nwg8eWs2oAauYzucszilwPFWr2D8xjfk07x49BrCAW0+iRFLqHJqfrmg 5aVRLnNcpbd24Y5JAplnhzASCeXB/gfbmnEkWZiBna+1fF0cOAzy8Wv5utXMMRLK dDm+VCd4s5tRREC6gFsEI2/3stSOu9nCTybRuPee32Z90sUNrLLeEdwF5/jvsMcp emfeckK/WpE8xfhV/IAR60+v3TpSagZ8cbT4gXDtX7DNFkX3Kiph1jWc9zghZw== -----END CERTIFICATE-----Generated at Sun Jun 1 05:18:25 2025 by rpki-client